Privacy Policy

  • Effective Date: July 13, 2025

    Contact Email: [email protected]

  • At Cardly, accessible at https://cardly.eu , we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable European privacy laws.

  • 1. Who We Are

    Cardly is an independent platform providing reviews and comparisons of banking cards and financial services. For the purposes of data protection laws, Cardly is the data controller of your personal information.

  • 2. What Data We Collect

    We may collect and process the following types of personal data:

    • Contact Information: Email address when you subscribe to our newsletter or contact us.
    • Usage Data: Pages visited, referral source, browser type, and device data.
    • Cookies and Tracking Data: Information gathered through cookies (see our Cookie Policy).

    We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data.

  • 3. How We Use Your Data

    We use your personal data for the following purposes:

    • To provide you with relevant content and recommendations
    • To send newsletters and promotional emails (if you opt in)
    • To improve our website’s functionality and user experience
    • To comply with legal obligations
  • 4. Legal Basis for Processing

    Under GDPR, our legal bases for collecting and using your data include:

    • Consent – for marketing communications or optional cookies
    • Legitimate Interests – for website analytics and improvement
    • Legal Obligation – where processing is necessary to comply with laws
  • 5. Sharing of Personal Data

    We do not sell your personal data. However, we may share it with:

    • Service providers (e.g. analytics providers, newsletter tools)
    • Legal or regulatory authorities if required by law

    All third-party processors are GDPR-compliant and bound by confidentiality agreements.

  • 6. Data Retention

    We retain personal data only for as long as necessary for the purposes outlined above, or as required by applicable law.

  • 7. Your Rights Under GDPR

    You have the right to:

    • Access your personal data
    • Rectify inaccurate data
    • Erase your data (“right to be forgotten”)
    • Restrict or object to processing
    • Withdraw consent at any time
    • Lodge a complaint with a supervisory authority

    To exercise any of these rights, contact us at: [email protected]

  • 8. International Data Transfers

    Your data may be processed outside the EU (e.g., via third-party services). When this occurs, we ensure that appropriate safeguards are in place (e.g., Standard Contractual Clauses).

  • 9. Security

    We implement technical and organizational measures to ensure a high level of security for your personal data and to prevent unauthorized access, loss, or misuse.

  • 10. Third-Party Links

    Our website may contain links to external websites. We are not responsible for the privacy practices of such third parties. Please review their policies separately.

  • 11. Updates to This Policy

    We may update this Privacy Policy from time to time. The updated version will be posted on this page with the “Effective Date” changed accordingly. Continued use of our site means you agree to these changes.

  • Contact Us

    If you have any questions or concerns about this Privacy Policy or your personal data, you can contact us at: